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CROSS REFERENCE TO RELATED APPLICATIONS 
[0001] This application is the US National Stage of 
International Application No. PCT/DE2003 /003859 , filed 
November 21, 2003 and claims the benefit thereof. The 
International Application claims the benefits of German 
application No. 10254629.0 filed November 22, 2002, both 
applications are incorporated by reference herein in their 
entirety. 

FIELD OF THE INVENTION 
[0002] The invention relates to a method for displaying 
calibration-required data. 

SUMMARY OF THE INVENTION 
[0003] In measurement systems in production, goods 
distribution or other plant measured value recorders and 
measured value displays are generally distributed across the 
plant, with the measured values or measurement data being 
transmitted from the measured value recorders to the 
measured value displays. The measurement data is 
increasingly displayed using freely-programmable PCs. In, 
addition the measurement data is included as a rule for the 
control of the plant. By contrast with measuring devices in 
which the measured value recorder and the measured value 
display are integrated into one device, software, i.e. data" 
transmission and processing have a prominent role to play in 
measurement systems. This is taken into account in the 
Guidelines 7.1 of the European Cooperation in Legal 
Metrology (WELMEC) : "Software Requirements on the Basis of 
the Measuring Instruments Directive" dated October 1999 
(www.welmec.org/publications/7-l.pdf) in relation to the 
transmission and display of calibration-required data. One 
of the proposals in this document is that calbration- 
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required data which is transmitted over a non-encapsulated 
transmission path, for example a network, should be 
encrypted to protect it from manipulation. To ensure the 
authenticity of the data when it is received, the address of 
the relevant sender can be transmitted together with the 
data. Additionally combining the calibration-required data 
to be transmitted with a time stamp enables the currency of 
the data to be checked on receipt. In relation to the 
display of the calibration-required data on a PC with a 
Windows interface there is a requirement for the data to be 
presented in a window which is automatically always moved 
into the foreground and cannot be covered by other windows, 
for the calibration-required data to be presented in the 
window in a form which cannot be confused with the other 
windows, and for the window which displays the calibration- 
required data to be administered by a calibration-required 
part of the program, that is a part of the program protected 
from deliberate changes by means of widely-used software 
tools (text editors) . 

[0004] The object of the invention is to specify a predictable 
method for displaying calibration-required data which 
satisfies the above-mentioned WELMEC requirements. 

[0005] In accordance with the invention the object is achieved 
by displaying the calibration-required data by means' of an 
industry visualization system which can be planned using 
predetermined project planning software and has a standard 
interface to incorporate further applications, with the 
calibration-required data being transmitted to the 
visualization system with its integrity ensured and being 
visualized via one of the applications incorporated into the 
standard interface in a way other than that provided by the 
presentation options able to be planned via the project- 
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planning software. 

[0006] Industry visualization system here is taken to mean an 
operation and monitoring device or HMI (Human Machine 
Interface) device as is used in particular in process 
automation systems. Functions, switches or process values 
are visualized on a so-called operator or touch panel. With 
the aid of this visualization processes, error messages or 
process values can be displayed in an easy-to-understand way 
to the viewer. Recording the processes visually, for example 
in the form of process images, makes operation easier for 
the user. The visualization system can be connected via a 
data connection to the process automation system and allows 
project-specific function keys, buttons or display elements 
to be used to influence the project. The visualization 
system is planned using prespecified project . planning 
software which enables ideas to be converted simply and 
rapidly into simple and easy-to-understand images for the 
visualization system without the user having to have any 
specific program knowledge to perform these operations. To 
allow an open visualization system to be achieved while 
retaining ease of project . planning, this system has one or 
more standard interfaces. Examples are for graphics import 
of BMP, WMF, TIF images, for data exchange DDE, ODBC, RAS 
and for the Integration of applications OLE and ActiveX. 
These interfaces provide a simple method - of exchanging data ' 
between individual software products. ActiveX for example 
(previously also known, as OCX-OLE Custom Control) allows 
ready-made application components to be incorporated into 
another application, for example into a visualization 
system. Process visualization can thus be enriched by 
functionalities for which there is' no provision in the 
project planning software. The method in accordance with the 
invention advantageously uses a standard interface of an 
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industry visualization system, allowing an application to be 
incorporated into the visualization system via this 
interface with which the calibration-required data with 
ensured integrity can be visualized in a form complying with 
the WELMEC guidelines. 

[0007] If the calibration-required data is transmitted within 
a plant which counts as closed, safeguarding its integrity 
can be sufficient to meet the WELMEC requirements. If the 
transmission path, as in telephone networks for example, is 
to be regarded as open, encryption of the calibration- 
required data to be transmitted is necessary. In this case 
the encrypted data is decrypted in the visualization system 
by the application linked in via the standard interface. 

[0008] The encryption of confidential data before transmission 
to a receiver is generally known. In what is known as the 
public encryption method the sender uses a public key of the 
authorized recipient for encryption of the data, so that 
only this recipient can decrypt the data with his own 
private key. The sender can authenticate the data by signing 
it. To do this the sender encrypts the data with his own 
private key while the recipient uses the sender's public key 
to decypt the data. Data encrypted with public keys is not 
necessarily authentic whereas data signed with private keys 
is not confidential. To establish the confidentiality and 
authenticity data encryption and signing can thus be 
combined, to which end the sender first encrypts the data 
with his own private key and then with the recipient's 
public key. This is also possible with the method in 
accordance with the invention: Preferably however the 
calibration-required data is encrypted on the sender side 
with a private key and decrypted on the receiver side with 
the same private key. The private keys are integrated when 
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the send device, for example a display module, and the 
receive device, in this case the visualization system, are 
manufactured. To finally guarantee the integrity, i.e. the 
incorruptibility of the transmitted data, the transmitter 
can determined the data from a check code which is sent 
encrypted to the recipient. The recipient decrypts the check 
code and compares the check code thus decrypted with the 
check code computed from the received data; if the two check 
codes are the same, the integrity of the data is ensured. To 
enable data coming from different senders to be displayed 
unmistakably on one and the same visualization system, the 
address of the relevant transmitter can be sent encrypted 
together with the data and subsequently visualized together 
with the associated data. Additionally combining the 
calibration-required data to be transmitted with a time 
stamp finally enables the currency of the data to be checked 
on receipt. 

[0009] As already explained the calibration-required data is 
presented on the industry visualization system in a form 
which cannot be planned with the project planning software. 
This can occur in that the calibration-required data is 
visualized in a display area of the visualization system not 
accessible to the project planning software and thus 
reserved exclusively for display of the calibration-required 
data. Additionally or alternatively the calibration-required 
data can be visualized together with additional information 
which cannot be planned by the project planning software, 
for example a typical watermark in the background. 

[0010] For further explanation of the method in accordance 
with the invention reference is made below to the single 
figure of the drawing which shows part of an automation 
system. 
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BRIEF DESCRIPTION OF THE DRAWING 
[0011] The sole figure shows a part of an automation system. 

DETAILED DESCRIPTION OF THE INVENTION 
[0012] A process scale (weighing module) 1 is arranged in the 
automation system which communicates via a backplane bus 2 
with of a CPU module 3 of the automation system. The CPU 
module 3 is connected just like an industry visualization 
system 4 to a field bus system 5, e.g. Profibus, of the 
automation system .. 

[0013] In the encapsulated weighing module 1 calibration- 
required weighing data generated by a weighing cell not 
shown in this diagram is combined with a designation of the 
weighing module 1, a time stamp (date, time of day), if 
necessary further parameters and a check code computed from 
this data to form a metadata record and is encrypted with a 
private key. This encrypted metadata record is transmitted 
via the backplane bus 2 to the CPU subassembly 3 and stored 
there together with unencrypted data in a memory. The 
unencrypted data can be weighing data of the weighing 
module, provided this weighing data is not intended for 
calibration-required applications, i.e. it is included for 
example for control purposes within the automation system. 

[0014] To present the calibration-required weighing data the 
encrypted data set is transmitted via the unencapsulated 
field bus system 5 to the industry visualization system 4. 
This can be included in the project via a project planning 
interface by means of predetermined project planning 
software which allows specific presentations and forms of 
presentation. The industry visualization system 4 further 
features a standard interface for incorporating further 
applications into the industry visualization system 4, e.g. 
ActiveX-elements in this instance. Such ActiveX elements are 
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used' to decrypt the data record, with the same private key- 
being used as in the weighing module 1. The ActiveX element, 
by comparing the decrypted check code with the check code 
computed from the received data, checks the integrity of the 
data and displays the weighing data and the designation of 
the associated weighing module 1 on a display 6 of the 
industry visualization system 4. In this case the data is 
presented in a form which could not be planned in the 
project planning software. This is done for example in a 
window 7 which cannot be covered by other windows and of 
which the 'background displays a unique watermark S f e.g. 
fine wavy lines. The decrypted data is not available as 
internal variables, so that they can also not be modified 
and can be presented in the same way. 
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